Kaspersky Source Code In the Wild

mvar writes "The source code of an older version of 'Kaspersky Internet Security' has been circulated on the internet. The code was created in late 2007 and was probably stolen in early 2008. Names contained in the source indicate that the stolen code was probably a beta version of the 2008 software package – the current release is Kaspersky Internet Security 2011. According to a Russian language report by CNews (Google translation), the code was copied by a disgruntled ex-employee. The thief has reportedly been trying to sell the code on the black market for some time, and Kaspersky says that the code archive already appeared in various private forums last November."

Pay developers more!

[nicholas22]

Another disgruntled employee. I wonder why he is disgruntled...

Stolen??

[Jaxoreth]

I wish them luck recovering it so they don't have to rewrite it from scratch.

(Copyright infringement is not theft.)

Re:The bad news is

[sqlrob]

That won't work. The source for Ubuntu has already leaked.

Re:Pay developers more!

[djdanlib]

Perhaps he has only misplaced his gruntle, and is not fully disgruntled.

Re:The bad news is

[Opportunist]

Dammit, now Linux is hellish insecure!

Why didn't anyone inform the community? That's so irresponsible!

here is the source code:

[rent]

I visited some of these forums today, and fair enough.. the source code is there. Here is what I found:

#include <stdio.h>
#include <kaspersky.h>

char make_prog_look_big[1600000];

main()
{
   if (detect_cache())
      disable_cache();

   if (fast_cpu())
      set_wait_states(lots);

   set_mouse(speed, very_slow);
   set_mouse(action, jumpy);
   set_mouse(reaction, sometimes);

   printf("Please wait, Kaspersky is scanning your computah)\n");

   if (system_ok())
      crash(to_dos_prompt);
   else
      system_memory = open("a:\swp0001.swp", O_CREATE);

   while(1) {
      sleep(5);
      scan_a_single_file();
      sleep(5);
      update_progress_bar();
      sleep(5);
      if (rand() < 0.9)
         crash(complete_system);
      }
      return(unrecoverable_system);
   }

}